github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/sbom (about) cataloger.go cataloger_test.go test-fixtures